📘 Selamat Datang

LAPAK OKKI menyediakan REST API resmi untuk mempermudah integrasi dan otomatisasi transaksi produk digital di toko kami. Anda dapat menghubungkan sistem Anda dengan mudah dari Telegram Bot, website, aplikasi desktop, maupun aplikasi mobile.

🚀 Langkah Mudah Memulai

1. Pendaftaran Akun: Daftar atau masuk ke akun LAPAK OKKI Anda (akses API terbuka untuk seluruh pengguna terdaftar).
2. Pengisian Saldo Dompet: Isi saldo dompet melalui menu Akun Saya → Dompet Saya (proses otomatis 24/7 via QRIS, E-Wallet, atau Virtual Account).
3. Pembuatan API Key: Buka menu Akun Saya → Koneksi API, lalu buat API Key dan API Secret baru.
4. Mulai Transaksi API: Kirim HTTP Request ke endpoint API kami. Saldo dompet akan terpotong secara otomatis dan instan saat pembelian berhasil dibuat.

🧪 Mode Sandbox & Testing Environment

Mode Sandbox dirancang khusus agar pengembang dan reseller dapat menguji integrasi sistem tanpa risiko finansial atau pengotoran data transaksi riil toko.

curl -X POST "https://lapakokki.com/wp-json/reseller/v1/orders" \
  -H "X-WRC-API-Key: " \
  -H "X-WRC-API-Secret: YOUR_API_SECRET" \
  -H "X-WRC-Sandbox: 1" \
  -H "Content-Type: application/json" \
  -d '{
    "items": [{"product_id": 123, "quantity": 1}],
    "customer_name": "Tester Sandbox"
  }'

🔐 Autentikasi

Setiap permintaan HTTP wajib menyertakan header autentikasi berikut:

X-WRC-API-Key: YOUR_API_KEY
X-WRC-API-Secret: YOUR_API_SECRET

💻 Contoh Implementasi Multi-Bahasa Pemrograman

curl -X GET "https://lapakokki.com/wp-json/reseller/v1/products" \
  -H "X-WRC-API-Key: YOUR_API_KEY" \
  -H "X-WRC-API-Secret: YOUR_API_SECRET"

const axios = require('axios');

axios.get('https://lapakokki.com/wp-json/reseller/v1/products', {
    headers: {
        'X-WRC-API-Key': 'YOUR_API_KEY',
        'X-WRC-API-Secret': 'YOUR_API_SECRET'
    }
}).then(response => console.log(response.data));

$ch = curl_init('https://lapakokki.com/wp-json/reseller/v1/products');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'X-WRC-API-Key: YOUR_API_KEY',
    'X-WRC-API-Secret: YOUR_API_SECRET',
]);
$response = curl_exec($ch);
curl_close($ch);

import requests

response = requests.get(
    'https://lapakokki.com/wp-json/reseller/v1/products',
    headers={
        'X-WRC-API-Key': 'YOUR_API_KEY',
        'X-WRC-API-Secret': 'YOUR_API_SECRET',
    }
)

Selain header kustom, Anda juga dapat menggunakan skema Basic Authentication:

Authorization: Basic base64(API_KEY:API_SECRET)

🛡️ Header Idempotensi (X-Idempotency-Key)

Untuk mencegah eksekusi ganda atau pemotongan saldo berulang saat terjadi gangguan jaringan pada transaksi pembuatan pesanan (POST /orders), Anda disarankan menyertakan header HTTP X-Idempotency-Key (atau parameter idempotency_key).

📦 Produk

Contoh Respons JSON GET /products (200 OK):

[
  {
    "id": 123,
    "name": "Canva Pro 1 Bulan (Invite)",
    "slug": "canva-pro-1-bulan",
    "price": "50000",
    "regular_price": "60000",
    "stock_status": "instock",
    "stock_quantity": 45,
    "categories": ["Desain", "Aplikasi"],
    "is_variable": false,
    "variations": []
  }
]

🛒 Pembelian

curl -X POST "https://lapakokki.com/wp-json/reseller/v1/orders" \
  -H "X-WRC-API-Key: YOUR_API_KEY" \
  -H "X-WRC-API-Secret: YOUR_API_SECRET" \
  -H "Content-Type: application/json" \
  -d '{
    "items": [
      {
        "product_id": 123,
        "quantity": 1
      }
    ],
    "customer_name": "Budi Santoso",
    "customer_phone": "081234567890",
    "customer_email": "budi@example.com",
    "customer_note": "Upgrade Akun: emailpembeli@example.com"
  }'

const axios = require('axios');

axios.post('https://lapakokki.com/wp-json/reseller/v1/orders', {
    items: [{ product_id: 123, quantity: 1 }],
    customer_name: 'Budi Santoso',
    customer_phone: '081234567890',
    customer_email: 'budi@example.com',
    customer_note: 'Upgrade Akun: emailpembeli@example.com'
}, {
    headers: {
        'X-WRC-API-Key': 'YOUR_API_KEY',
        'X-WRC-API-Secret': 'YOUR_API_SECRET',
        'Content-Type': 'application/json'
    }
}).then(response => console.log(response.data));

$ch = curl_init( 'https://lapakokki.com/wp-json/reseller/v1/orders' );
curl_setopt( $ch, CURLOPT_RETURNTRANSFER, true );
curl_setopt( $ch, CURLOPT_POST, true );
curl_setopt( $ch, CURLOPT_HTTPHEADER, array(
    'X-WRC-API-Key: YOUR_API_KEY',
    'X-WRC-API-Secret: YOUR_API_SECRET',
    'Content-Type: application/json',
) );
curl_setopt( $ch, CURLOPT_POSTFIELDS, json_encode( array(
    'items' => array(
        array(
            'product_id' => 123,
            'quantity'   => 1,
        ),
    ),
    'customer_name'  => 'Budi Santoso',
    'customer_phone' => '081234567890',
    'customer_email' => 'budi@example.com',
    'customer_note'  => 'Upgrade Akun: emailpembeli@example.com',
) ) );
$response = curl_exec( $ch );
curl_close( $ch );

import requests

url = "https://lapakokki.com/wp-json/reseller/v1/orders"
headers = {
    "X-WRC-API-Key": "YOUR_API_KEY",
    "X-WRC-API-Secret": "YOUR_API_SECRET",
    "Content-Type": "application/json"
}
payload = {
    "items": [{"product_id": 123, "quantity": 1}],
    "customer_name": "Budi Santoso",
    "customer_phone": "081234567890",
    "customer_email": "budi@example.com",
    "customer_note": "Upgrade Akun: emailpembeli@example.com"
}

response = requests.post(url, json=payload, headers=headers)
print(response.json())

Contoh Respons JSON Sukses (200 OK):

{
  "success": true,
  "order_id": 1048,
  "status": "completed",
  "total": "50000",
  "currency": "IDR",
  "items": [
    {
      "product_id": 123,
      "product_name": "Canva Pro 1 Bulan (Invite)",
      "quantity": 1,
      "price": "50000",
      "licenses": [
        {
          "product_id": 123,
          "license_key": "ACCOUNT-LOGIN-OKKI-PASS123"
        }
      ]
    }
  ],
  "customer_name": "Budi Santoso",
  "customer_note": "Upgrade Akun: emailpembeli@example.com",
  "created_at": "2026-09-02 17:30:00"
}

Parameter Body Permintaan (POST /orders):

* Status Dinamis: Wajib atau Opsional ditentukan oleh pengaturan syarat data pembelian yang dikonfigurasi oleh Pengelola Toko.

{
  "success": true,
  "order": {
    "id": 1048,
    "status": "completed",
    "total": "50000",
    "items": [
      {
        "product_id": 123,
        "name": "Canva Pro 1 Bulan (Invite)",
        "quantity": 1,
        "licenses": [
          {
            "product_id": 123,
            "license_key": "ACCOUNT-LOGIN-OKKI-PASS123"
          }
        ]
      }
    ],
    "customer_name": "Budi Santoso",
    "created_at": "2026-09-02 17:30:00"
  }
}

💰 Dompet & Akun

{
  "success": true,
  "balance": 150000,
  "formatted": "Rp 150.000",
  "currency": "IDR"
}

[
  {
    "id": 501,
    "type": "debit",
    "amount": 50000,
    "balance_after": 150000,
    "description": "Pembayaran Order #1048",
    "created_at": "2026-09-02 17:30:00"
  },
  {
    "id": 498,
    "type": "credit",
    "amount": 200000,
    "balance_after": 200000,
    "description": "Top Up Saldo via Manual Admin",
    "created_at": "2026-09-02 10:00:00"
  }
]

{
  "success": true,
  "stats": {
    "total_spent": 2500000,
    "total_orders": 42,
    "active_keys": 2,
    "current_tier": "Tier Reseller VIP"
  }
}

🔔 Webhooks & Callback Status

Untuk transaksi bertipe Invite / Upgrade Akun yang membutuhkan pemrosesan manual, sistem kami mendukung pemberitahuan otomatis via Webhook Callback ketika pemesanan diselesaikan oleh Pengelola Toko.

Contoh Payload Webhook Callback Berdasarkan Jenis Event:

{
  "event": "order.completed",
  "order_id": 1048,
  "status": "completed",
  "total": "50000",
  "customer_name": "Budi Santoso",
  "customer_note": "Upgrade Akun: emailpembeli@example.com",
  "licenses": [
    {
      "product_id": 123,
      "license_key": "ACCOUNT-LOGIN-OKKI-PASS123"
    }
  ],
  "timestamp": 1788332400
}

{
  "event": "order.processing",
  "order_id": 1049,
  "status": "processing",
  "total": "75000",
  "customer_name": "Siti Rahma",
  "customer_note": "Invite Member: siti@example.com",
  "licenses": [],
  "timestamp": 1788332500
}

{
  "event": "order.failed",
  "order_id": 1050,
  "status": "failed",
  "total": "50000",
  "refunded": true,
  "refund_amount": "50000",
  "reason": "Email tujuan tidak dapat di-invite oleh sistem provider",
  "timestamp": 1788332600
}

🔑 Verifikasi Keamanan Signature (X-WRC-Signature)

Setiap panggilan Webhook menyertakan header HTTP X-WRC-Signature yang dihitung menggunakan HMAC-SHA256 dari raw payload JSON menggunakan API Secret Anda. Sangat disarankan untuk memverifikasi signature ini demi keamanan server Anda.

$received_sig   = $_SERVER['HTTP_X_WRC_SIGNATURE'] ?? '';
$raw_payload    = file_get_contents('php://input');
$calculated_sig = hash_hmac('sha256', $raw_payload, 'YOUR_API_SECRET');

if (hash_equals($calculated_sig, $received_sig)) {
    // Signature valid & autentik dari server LAPAK OKKI!
    $data = json_decode($raw_payload, true);
    // Process order.completed
} else {
    http_response_code(401);
    exit('Invalid Signature');
}

import hmac
import hashlib
from flask import Flask, request, abort

app = Flask(__name__)

@app.route('/webhook', methods=['POST'])
def handle_webhook():
    received_sig = request.headers.get('X-WRC-Signature', '')
    raw_payload = request.data
    calculated_sig = hmac.new('YOUR_API_SECRET'.encode(), raw_payload, hashlib.sha256).hexdigest()
    
    if hmac.compare_digest(calculated_sig, received_sig):
        # Signature valid & autentik!
        data = request.get_json()
        return 'OK', 200
    else:
        abort(401)

❌ Kode Error

⏱️ Batas Penggunaan (Rate Limit)

❓ Pertanyaan Sering Diajukan (FAQ)